Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/73e40711-5419-39fd-87e4-7ef47dab552c.roa
File:                     73e40711-5419-39fd-87e4-7ef47dab552c.roa (raw, json)
Hash identifier:          Z3qTa5f4BY8+aGICab910bs/5sWyF4ug1AU11R2frro=
Subject key identifier:   EF:AF:A0:BA:07:45:E6:C2:66:19:7F:2D:42:FE:A2:2A:58:18:1F:BB
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584C88A6CE28BB84C286D4491750
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/73e40711-5419-39fd-87e4-7ef47dab552c.roa
Signing time:             Thu 15 Jan 2026 14:00:38 +0000
ROA not before:           Thu 15 Jan 2026 14:00:38 +0000
ROA not after:            Wed 15 Apr 2026 13:00:38 +0000
asID:                     31713
IP address blocks:        206.161.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:88:a6:ce:28:bb:84:c2:86:d4:49:17:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jan 15 14:00:38 2026 GMT
            Not After : Apr 15 13:00:38 2026 GMT
        Subject: CN=df95d35a-f71a-448a-8cfb-39446dfa29fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4f:e2:cd:e2:3d:41:8b:79:b5:05:1f:79:3b:
                    b6:6f:3a:25:98:c3:5f:ae:37:b4:8f:58:fd:5b:0d:
                    3d:ff:d2:72:45:a2:0e:b5:26:b9:10:97:3f:32:1a:
                    fe:6a:a0:52:df:2b:81:cb:06:d4:c5:4e:8e:bf:dc:
                    32:8d:86:7c:c9:df:09:93:1e:2b:a8:b5:3d:51:3c:
                    04:8d:31:5a:9b:ef:04:64:ec:47:9e:1e:36:88:0f:
                    4d:11:27:cb:ee:77:df:8b:7d:2d:56:31:55:f6:c9:
                    ac:59:1f:30:53:26:dd:be:3f:7f:7e:5c:4a:76:e6:
                    ea:05:55:cb:0f:15:ec:09:85:62:d9:6b:7b:bd:6a:
                    e8:2c:8d:c0:94:10:b7:07:9f:d9:76:99:13:5d:03:
                    06:4b:3f:2f:c5:ed:2a:2f:b4:5b:2a:76:27:c3:9b:
                    2d:91:1d:17:45:a1:ca:4e:73:56:31:8d:2a:ed:65:
                    e2:b8:31:4f:94:32:83:d3:6e:57:af:c4:d5:22:73:
                    a1:3a:3c:d9:54:29:f7:b3:4d:c1:77:24:bd:7e:5d:
                    1f:25:ee:fd:3a:9e:4b:8e:ed:3b:20:07:9b:1b:e0:
                    0d:10:a2:ae:f9:3a:98:0d:96:5b:53:3a:71:5b:0b:
                    e5:00:ec:06:3d:d8:85:46:74:c0:5e:50:55:a0:8e:
                    47:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AF:A0:BA:07:45:E6:C2:66:19:7F:2D:42:FE:A2:2A:58:18:1F:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/73e40711-5419-39fd-87e4-7ef47dab552c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:32:90:58:a2:5c:b5:29:03:74:9c:60:bb:9d:a3:33:38:e9:
         db:6c:93:22:68:ba:a7:a1:e6:e1:98:7c:54:7e:ff:b1:0a:07:
         c6:01:6a:e2:47:f4:e2:57:05:14:d2:1f:67:e1:e8:7a:ec:c7:
         8f:70:e0:23:60:8d:f6:7e:f3:80:9a:41:8c:b5:d0:87:08:99:
         85:1a:cc:9e:84:7b:8e:6e:07:eb:5e:e0:de:e3:fb:30:7b:b6:
         78:55:e3:10:fc:e0:c0:c5:d8:ec:ff:d7:14:3a:e6:15:41:8c:
         58:14:e6:0d:63:ff:e7:7e:d4:c9:83:91:9a:31:65:9d:0b:19:
         ff:ff:0e:b9:6c:c6:1a:34:5a:d4:f7:a6:e2:32:34:b9:4a:23:
         8a:87:90:f4:d0:e7:ae:97:7c:55:fa:1b:4a:f6:8d:03:56:87:
         d1:f7:3c:5b:87:7d:77:3a:fa:6d:41:df:65:bb:d6:3b:26:e3:
         c8:e5:2a:72:bd:7d:b0:b7:6b:88:c6:e1:fe:25:18:0b:82:25:
         82:cd:3a:b5:61:3b:d5:6d:8d:21:f4:3e:ed:91:f0:6c:10:40:
         49:a3:e0:76:3a:9d:3f:e2:99:cb:bf:1f:e0:4f:d1:ee:55:1c:
         04:a7:cc:3e:55:d1:47:f7:4b:01:b7:d1:56:9a:41:e3:cf:5d:
         e2:d2:38:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:35:24 2026 by rpki-client